flomo-add
v1.0.1通过 Python requests 向 flomo webhook URL 新增一条 memo。使用 scripts/flomo-add.py 从 .flomo.config 读取 url 并发起 POST 请求,支持在 macOS 与 Windows 环境下添加 flomo 笔记。用户需要快速新增 flomo...
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, SKILL.md and the included script all align: the script reads a local .flomo.config for url and POSTs a JSON payload with the provided content to that URL. No unrelated services, credentials, or binaries are requested.
Instruction Scope
Runtime instructions limit behavior to reading the specified .flomo.config and sending a POST to the configured webhook (or using an explicit --url). The SKILL.md also documents dry-run and curl alternatives. The instructions do not read other system files, environment variables, or send data to unexpected endpoints.
Install Mechanism
This is an instruction-only skill with no install spec (low risk). The script depends on the Python 'requests' package but does not install it — SKILL.md and the script mention dependency failures if requests is missing. Users must ensure Python and requests are available.
Credentials
No environment variables or external credentials are requested. The only configuration read is a local .flomo.config containing the flomo webhook URL, which is appropriate and proportionate for the stated purpose.
Persistence & Privilege
Skill is not force-installed (always:false). It does not modify other skills or global agent settings. Autonomous invocation is allowed by default but is not a special privilege here and does not introduce additional incoherence.
Assessment
This skill appears to do exactly what it says: read a local .flomo.config for url and POST the provided content to that webhook. Before installing or running: ensure you run it in a directory that contains your .flomo.config (and avoid committing that file to public repos), make sure Python and the 'requests' package are installed, and verify the webhook URL is correct — anyone with that URL can post to your flomo, so treat it as a secret. If you permit automated agent invocation, be aware the agent could send memos automatically if it chooses to run this skill with content you provide or that it generates.Like a lobster shell, security has layers — review code before you run it.
latest
flomo-add
向 flomo 新增一条 memo(单条写入)。
前置入参要求(必须)
执行本技能前,必须先明确并拿到以下入参:
- 当前项目主路径(绝对路径),例如
/Users/xxx/project-name - memo 文本内容(即本次要写入 flomo 的
content)
必须在“当前项目主路径”下存在 .flomo.config,并且包含 url=<flomo webhook url>。
配置(必须)
在项目主路径下创建 .flomo.config,并包含 url=<flomo webhook url>。
.flomo.config 格式说明
- 通用规则:一行一个
key=value;以#开头的行为注释;空行忽略。 - flomo-add 所需:
url=<flomo webhook url>
示例:url=https://flomoapp.com/iwh/M000000/abcdefg0000000000000000000000000/
该 URL 需在 flomo 的「扩展中心 & API」中生成并妥善保管。 - 同一文件可同时包含
token=供 flomo-sync 使用(与 flomo-sync 共用一配置文件)。
快速开始
1) 使用 Python 脚本(推荐,内部调用 requests)
# 在项目主路径下执行
python skills/flomo-add/scripts/flomo-add.py --content "Hello, #flomo https://flomoapp.com"
可选参数:
--config:指定配置文件路径(默认.flomo.config)--url:临时覆盖配置里的url--dry-run:只打印将发送的请求信息,不真正发送
2) 直接使用 curl(macOS / Linux)
curl -X POST "https://flomoapp.com/iwh/M000000/abcdefg0000000000000000000000000/" \
-H "Content-Type: application/json" \
--data-binary '{"content":"Hello, #flomo https://flomoapp.com"}'
3) 直接使用 curl(Windows PowerShell)
$url = "https://flomoapp.com/iwh/M000000/abcdefg0000000000000000000000000/"
$body = '{"content":"Hello, #flomo https://flomoapp.com"}'
curl.exe -X POST $url -H "Content-Type: application/json" --data-binary $body
预期行为
- 成功时:返回 flomo API 响应并退出码为 0
- 失败时:脚本打印错误原因(缺少配置、requests 依赖缺失、HTTP 失败等)并退出非 0
文件说明
skills/flomo-add/
├── SKILL.md
├── scripts/
│ └── flomo-add.py
└── assets/ # 预留
Comments
Loading comments...
